eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35a

General

Target
eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35a
Size 3.9MB
Sample220616-wpzz5sbab7
SHA256 eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35
MD5 e6d7f54379ab0f1ef11b20eb75efbf75
SHA1 89a78ac3cbc683d732c40f3d085fcc90dbccd798
SHA512 7491afb25d42ff9f6d60731684894f9bb7f380ad42eadb3915b9343af76ff131f8cfef5ca9fc7e0d309150d3e9ece0c75953f34e4443d1a001feb0c11a33d128
SSDEEP 98304:skG09KHTjpmW++Ndyt+glT/EC7pjL6FJ+ScQ1lY:BG0QXpr+4lA/NpjGFJZG
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Requests dangerous framework permissions 6 IoCs

description	ioc
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to send SMS messages.	android.permission.SEND_SMS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE

File Explorer

eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35a

.7z 3.9MB
fedex.apk

.apk 4.0MB

eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35a

SHA256 eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35
MD5 e6d7f54379ab0f1ef11b20eb75efbf75
SHA1 89a78ac3cbc683d732c40f3d085fcc90dbccd798
SHA512 7491afb25d42ff9f6d60731684894f9bb7f380ad42eadb3915b9343af76ff131f8cfef5ca9fc7e0d309150d3e9ece0c75953f34e4443d1a001feb0c11a33d128
SSDEEP 98304:skG09KHTjpmW++Ndyt+glT/EC7pjL6FJ+ScQ1lY:BG0QXpr+4lA/NpjGFJZG
MD5 SHA1 SHA512 SSDEEP

fedex.apk

SHA256 2af548766f9a368e72dfab3c5bf4123da0d52f603e405e801f79a4a9c5b5c07c
MD5 2ffac6c6ba63598b34dc8a076208f7b4
SHA1 02d20c723835a961b594ada5c5acff8ee5ed9bab
SHA512 fbb2955d883d9275bfa0f7c23ca1110ceed1b13083ec249f8445c9c203fdbd9554c36ab91b7c3634871812f3661a7a0b33dc4168b2ef0f1afcff26e370468bd8
SSDEEP 98304:+1iNL19D17KA443+dt+G9ZDPAC77jZRFJhYv09Lc:7NLLZ7l4F2+97j7FJ/Lc
MD5 SHA1 SHA512 SSDEEP

android

com.tencent.mm

eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35a

fedex.apk

com.tencent.mm.BrowserActivity

com.tencent.mm.CardActivity

com.tencent.mm.SmsThreadActivity

com.tencent.mm.ComposeSmsActivity

com.tencent.mm.MainActivity

com.tencent.mm.IntentStarter

com.mcal.apkprotector.activities.CopyClipActivity

com.tencent.mm.MyNotificationListener

com.tencent.mm.ForegroundService

com.tencent.mm.HeadlessSmsSendService

com.tencent.mm.MyAccessibilityService

com.tencent.mm.SmsReceiver

com.tencent.mm.MmsReceiver

Sharing

General

Malware Config

Signatures

File Explorer

eb446a816c77cab326d2fe91fb9b3dd3e5be21e0eb0e4eb35fbdebcdc8d56d35a

fedex.apk

com.tencent.mm.BrowserActivity

com.tencent.mm.CardActivity

com.tencent.mm.SmsThreadActivity

com.tencent.mm.ComposeSmsActivity

com.tencent.mm.MainActivity

com.tencent.mm.IntentStarter

com.mcal.apkprotector.activities.CopyClipActivity

com.tencent.mm.MyNotificationListener

com.tencent.mm.ForegroundService

com.tencent.mm.HeadlessSmsSendService

com.tencent.mm.MyAccessibilityService

com.tencent.mm.SmsReceiver

com.tencent.mm.MmsReceiver